Application ScenariosAt a Middle Eastern ethylene cracker, the emergency shutdown system (ESD) relied on a fleet of digital output modules to actuate 48 emergency shutdown valves (ESDV) and 32 contactors across the furnace, compressor, and fractionation islands. The original non-safety-rated DO modules had become a hidden liability: when a single output driver failed silently, the corresponding ESDV failed to stroke during a monthly partial-stroke test, and the gap went unnoticed until a process upset demanded actual shut-down action. After retrofitting the entire ESD final-element layer with ABB 3BHE028588R1​ (i.e., DO880-1) modules, the plant gained continuous, non-intrusive loop supervision. The 3BSE028588R1​ supervises each output channel for short-circuit and open-load conditions with configurable resistance thresholds (50 Ω – 2 kΩ), and surfaces faults via both per-channel LEDs and the 800xA HMI — without ever pulsing the output and disturbing the field device. Within six months, the plant’s proof-test coverage climbed from 82% to 100%, and the SIL3-rated DO880-1​ modules enabled the ESD system to achieve a calculated PFDavg well within the SIL3 target band. The plant’s functional safety manager noted: “The 3BSE028588R1​ turned our ESD final elements from a black box into a transparent, self-reporting safety layer. Our auditors signed off on our SIL3 claim in record time.”Parameter

Technical Principles and Innovative Values

• Innovation Point 1: SIL3 Safety Integrity with Fault Tolerance 1.​ The ABB 3BSE028588R1​ is certified to IEC 61508 SIL3 and EN 954-1 Category 4, with a fault tolerance of 1 for its output drivers. This means that even if a single driver component fails, the module continues to maintain the safe state for normally-de-energized (ND) systems — directly satisfying the architectural constraints of IEC 61511 for safety-instrumented systems in process industries.
• Innovation Point 2: Non-Intrusive Output Diagnostics.​ Unlike conventional DO modules that require a test pulse (briefly interrupting the output) to verify channel health, the DO880-1​ performs diagnostics without pulsing the output. This “silent diagnostics” capability is revolutionary for safety applications — the field device (ESDV, contactor, alarm) never experiences a glitch, yet the 3BSE028588R1​ continuously confirms that each channel can still drive its load.
• Innovation Point 3: Configurable Loop Supervision.​ Each of the 16 channels on the ABB 3BSE028588R1​ supports configurable short-circuit and open-load detection with resistance thresholds adjustable from 50 Ω to 2 kΩ. This allows plant engineers to tailor the diagnostic sensitivity to the actual field wiring — detecting a broken wire to an ESDV coil or a shorted solenoid before it compromises the safety function.
• Innovation Point 4: Seamless Redundancy for Zero-Downtime Maintenance.​ The DO880-1​ supports 1:1 redundant (S/R) configuration. When paired with a redundant partner, a failed module can be hot-swapped under power without interrupting the safety function. In a typical 800xA SIS cabinet, this means the 3BSE028588R1​ can be replaced during a coffee break, not a planned outage.
• Innovation Point 5: Degraded Mode for Normally-Energized Channels.​ For applications where a channel must remain energized to keep a process safe (normally-energized, NE), the DO880-1​ (from DO880 PR:G firmware) supports a degraded mode: even with an error on the output driver, the channel remains controlled. This is critical for compressor anti-surge valves and furnace fuel-gas shutoff valves that must stay open until intentionally commanded to close.
• Innovation Point 6: Group-Wise Isolation with 500 V AC Dielectric Strength.​ All 16 outputs on the ABB 3BSE028588R1​ form a single galvanically isolated group from the ModuleBus backplane, with a 500 V AC dielectric test voltage. This isolation barrier prevents a field-side fault from propagating into the 800xA controller, protecting the entire control system.

Application Cases and Industry ValueBeyond the ethylene cracker case described above, the ABB 3BSE028588R1​ has delivered measurable value across the most safety-critical industries on the planet. At a North Sea offshore oil platform, the fire and gas (F&G) system’s final actuators — deluge skid solenoid valves, ESDV actuators, and PA/GA alarm relays — were originally driven by non-safety-rated DO modules. During a mandatory SIL reassessment, the platform’s safety team identified that the legacy modules lacked the diagnostic coverage required to substantiate a SIL2 claim, let alone SIL3. By migrating the entire F&G final-element layer to DO880-1​ modules, the platform not only achieved its SIL3 target but also reduced proof-test frequency from quarterly to annual — a savings of over 1,200 offshore technician-hours per year. The platform’s HSE lead commented: “The 3BSE028588R1​ gave us diagnostic coverage we simply couldn’t get from the old modules. Our SIL3 case is now defensible, auditable, and — frankly — something we’re proud to show regulators.”In a Southeast Asian combined-cycle power plant, the boiler main fuel trip (MFT) system relied on the ABB 3BSE028588R1​ to drive 32 critical contactors and 16 ESDVs. The plant had previously suffered a near-miss when an undocumented modification to a single ESDV solenoid caused the legacy DO module to enter an undetected fault state. After the retrofit to DO880-1​ modules, the configurable loop supervision immediately flagged the anomalous loop resistance during the next proof test, prompting maintenance to discover a partially severed conductor before it could fail in service. The plant’s control systems engineer observed: “The 3BSE028588R1​ caught what human inspection missed. That one catch paid for the entire module replacement project.”Related Product Combination SolutionsTo build a complete ABB 800xA SIS / S800 I/O safety node around the ABB 3BSE028588R1, the following companion modules are typically deployed:

• ABB DI880 / 3BSE028586R1:​ The SIL3-certified 16-channel digital input module — the natural input-side companion to the 3BSE028588R1​ in a complete safety-instrumented system.
• ABB AI880 / 3BSE028576R1:​ The SIL3-certified analog input module for acquiring 4–20 mA transmitter signals (temperature, pressure, flow) that feed safety logic executed alongside the 3BSE028588R1​ outputs.
• ABB PM865 / 3BSE053240R1:​ The AC 800M high-integrity controller (SIL3) that orchestrates safety logic and drives the 3BSE028588R1​ output commands.
• ABB TU810V1 / TU812V1 / TU830V1:​ The S800 MTU terminal base units onto which the 3BSE028588R1​ seats, providing field wiring termination and ModuleBus connectivity.
• ABB CI854A / 3BSE025349R1:​ The PROFIBUS DP communication interface module linking the AC 800M controller to the S800 I/O rack containing the 3BSE028588R1.
• ABB SS822 / 3BSE038226R1:​ The redundant 24 V DC power supply system that feeds the 3BSE028588R1​ and associated S800 modules, ensuring uninterrupted safety operation.
• ABB SB822 / 3BSE038230R1:​ The battery backup unit that maintains volatile memory and orderly shutdown capability for the safety controller driving the 3BSE028588R1.